JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.230.168.48

91.230.168.48 was found in our database!

This IP was reported 643 times. Confidence of Abuse is 100%: ?

100%

ISP	FR ONYPHE
Usage Type	Commercial
ASN	AS213412
Hostname(s)	richards.probe.onyphe.net
Domain Name	onyphe.io
Country	🇺🇸 United States of America
City	Hillsboro, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.230.168.48

Whois 91.230.168.48

IP Abuse Reports for 91.230.168.48:

This IP address has been reported a total of 643 times from 83 distinct sources. 91.230.168.48 was first reported on February 6th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 dispaisyenterprises	2026-06-22 21:16:57 (4 hours ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 21314 [1] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 21314 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇦🇺 LiftUp Hosting	2026-06-22 07:58:27 (18 hours ago)	Honeypot hit: Empty payload (likely service probe); 2159 [1] TCP	Port Scan
🇵🇱 sefinek.net	2026-06-21 07:08:35 (1 day ago)	Honeypot hit: Empty payload (likely service probe); 6881 [1] TCP Reported by: https://github.com/sef ... show more Honeypot hit: Empty payload (likely service probe); 6881 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 sandra361	2026-06-20 02:18:02 (2 days ago)	Port scan detected: 6 attempts across 1 ports (2383). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=91.230. ... show more Port scan detected: 6 attempts across 1 ports (2383). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=91.230.168.48 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=1751 DF PROTO=TCP SPT=50787 DPT=2383 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 femboy.cat	2026-06-19 03:34:14 (3 days ago)	Port scan to tcp/4040 from 91.230.168.48	Brute-Force
🇺🇸 donarev419	2026-06-19 03:11:52 (3 days ago)	Connection to port 5006 with data transfer. Data preview: c	Port Scan Hacking
🇬🇧 sandra361	2026-06-19 02:49:04 (3 days ago)	Port scan detected: 8 attempts across 1 ports (50895). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=91 ... show more Port scan detected: 8 attempts across 1 ports (50895). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=91.230.168.48 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=44886 DF PROTO=TCP SPT=56769 DPT=50895 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 donarev419	2026-06-19 02:34:03 (3 days ago)	Connection to port 7024 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:7024 ... show more Connection to port 7024 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:7024 Connection: close User-Agent: Mozilla/5.0 (X11; Ubuntu; show less	Port Scan Hacking
🇸🇪 donarev419	2026-06-19 00:07:09 (4 days ago)	Connection to port 3003 with data transfer. Data preview: GET / HTTP/1.1 Host: 51.21.134.169:3003 ... show more Connection to port 3003 with data transfer. Data preview: GET / HTTP/1.1 Host: 51.21.134.169:3003 Connection: close User-Agent: Mozilla/5.0 (X11; Ubuntu; L show less	Port Scan Hacking
🇵🇱 sefinek.net	2026-06-18 14:09:38 (4 days ago)	Honeypot hit: Empty payload (likely service probe); 44445 [1] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 44445 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇬🇧 gbzret4d	2026-06-18 13:57:50 (4 days ago)	Honeypot [uk-production01]: Empty payload (likely service probe); 8066 [1] TCP	Port Scan
🇩🇪 dispaisyenterprises	2026-06-18 07:27:54 (4 days ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 7073 [1] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 7073 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇦🇺 LiftUp Hosting	2026-06-18 06:22:03 (4 days ago)	Honeypot hit: Unauthorized traffic (616 bytes of payload); 12601 [2] TCP	Port Scan
🇭🇰 sandra361	2026-06-17 23:16:22 (5 days ago)	Port scan detected: 8 attempts across 1 ports (5757). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=91.230. ... show more Port scan detected: 8 attempts across 1 ports (5757). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=91.230.168.48 LEN=60 TOS=0x14 PREC=0x00 TTL=47 ID=43684 DF PROTO=TCP SPT=43933 DPT=5757 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇵🇱 sefinek.net	2026-06-17 22:58:27 (5 days ago)	Honeypot hit: Empty payload (likely service probe); 25901 [1] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 25901 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan

Showing 1 to 15 of 643 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.184.5.149

🇧🇷 181.233.172.130

🇧🇷 170.233.51.36

🇺🇸 139.144.235.132

🇵🇱 87.251.64.157

🇺🇸 54.196.245.105

🇺🇸 54.89.207.112

🇯🇵 8.221.136.6

🇩🇪 217.154.144.111

🇩🇪 167.94.146.54

🇪🇸 157.88.38.35

🇧🇷 152.32.200.22

🇵🇰 144.79.57.249

🇧🇷 131.100.242.102

🇨🇳 111.26.95.254

🇱🇧 109.233.21.109

🇺🇸 104.236.118.31

🇬🇧 34.153.153.220

🇸🇦 31.166.130.153

🇺🇸 23.92.25.114